Lucene search
+L

8948 matches found

EUVD
EUVD
•added 2026/09/08 8:11 p.m.•12 views

EUVD-2026-74175

The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced path is loaded via Assembly.LoadFrom without signature validation, resulting in an unverified assembly executing within the conte...

7.5CVSS5.7AI score0.00099EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/08 7:05 p.m.•21 views

Malicious code in punypump (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e56cc14096d20f679823bf15af9f44dff039e01f23d2082eba8020200d04a7f The package presents itself as a console shim index.js is a verbatim copy of console-browserify with description 'Emulate console for all the...

6AI score
SaveExploits0References3
NVD
NVD
•added 2026/09/08 1:17 a.m.•7 views

CVE-2026-58234

SAP Process Integration SOAP Adapter allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation results in low impact o...

2.2CVSS0.00338EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/08 12:10 a.m.•31 views

CVE-2026-58234 Denial of Service vulnerability in SAP Process Integration (SOAP Adapter)

SAP Process Integration SOAP Adapter allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation results in low impact o...

2.2CVSS0.00338EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/08 12:10 a.m.•35 views

CVE-2026-58234

SAP Process Integration (SOAP Adapter) is affected by a Denial of Service vulnerability where a privileged user can send specially crafted requests containing deeply nested entity definitions , temporarily increasing processor load and degrading system responsiveness under certain conditions. The...

2.2CVSS5.7AI score0.00338EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•16 views

PT-2026-88430

The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced path is loaded via Assembly.LoadFrom without signature validation, resulting in an unverified assembly executing within the conte...

7.5CVSS5.7AI score0.00099EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•11 views

PT-2026-87039

PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in the load mon module's stop path where exit and cleanup deletes the LoadMon object and frees the performance counter before perf end attempts to access it. Attackers can trigger this vulnerability by issuing the load mon stop...

7.1CVSS6.2AI score0.00384EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/07 12:17 p.m.•7 views

CVE-2026-2390

The Powerkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Lazy Load module's image processing in all versions up to, and including, 3.0.4. This is due to the 'contentprocessimages' function using a flawed regex-based HTML attribute parser. This makes it possible for...

6.4CVSS0.00193EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/07 11:27 a.m.•8 views

EUVD-2026-72350

The Powerkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Lazy Load module's image processing in all versions up to, and including, 3.0.4. This is due to the 'contentprocessimages' function using a flawed regex-based HTML attribute parser. This makes it possible for...

6.4CVSS5.9AI score0.00193EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/07 11:27 a.m.•35 views

CVE-2026-2390 Powerkit <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy Load Image Processing

The Powerkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Lazy Load module's image processing in all versions up to, and including, 3.0.4. This is due to the 'contentprocessimages' function using a flawed regex-based HTML attribute parser. This makes it possible for...

6.4CVSS0.00193EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/07 11:27 a.m.•18 views

CVE-2026-2390

The Powerkit WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) via its Lazy Load module's image processing in all versions up to and including 3.0.4 . The root cause is the content_process_images function, which relies on a flawed regex-based HTML attribute parser, allowing auth...

6.4CVSS6AI score0.00193EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/07 11:27 a.m.•8 views

CVE-2026-2390 Powerkit <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy Load Image Processing

The Powerkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Lazy Load module's image processing in all versions up to, and including, 3.0.4. This is due to the 'contentprocessimages' function using a flawed regex-based HTML attribute parser. This makes it possible for...

6.4CVSS5.9AI score0.00193EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2026/09/07 6:37 a.m.•6 views

WordPress Powerkit plugin <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy Load Image Processing vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Lazy Load Image Processing vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Powerkit versions = 3.0.4...

6.4CVSS5.8AI score0.00193EPSS
SaveExploits0References1Affected Software1
Redos
Redos
•added 2026/09/07 12:00 a.m.•6 views

ROS-20260907-73-0045

The vulnerability in Erlang relates to the possibility of using hard-coded platform keys. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code before the operating system is loaded...

6.3CVSS7AI score0.00427EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•14 views

PT-2026-86682

The Powerkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Lazy Load module's image processing in all versions up to, and including, 3.0.4. This is due to the 'content process images' function using a flawed regex-based HTML attribute parser. This makes it possible for...

6.4CVSS5.9AI score0.00193EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2026/09/05 7:16 p.m.•7 views

CVE-2026-0799

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to tr...

8.7CVSS5.8AI score0.00108EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/05 7:16 p.m.•5 views

UBUNTU-CVE-2026-0799

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to tr...

8.7CVSS5.8AI score0.00108EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/09/05 6:48 p.m.•15 views

CVE-2026-0799

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to tr...

8.7CVSS5.8AI score0.00108EPSS
SaveExploits0
HPE Security Bulletins
HPE Security Bulletins
•added 2026/09/04 12:00 a.m.•10 views

HPESBHF05128 rev.1 - HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01423, 2026.3 IPU, Intel Processor Load Value Injection Zero Data Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage - Prior to 2.7008-19-2026 HPE StoreEasy 1860 Storage - Prior to 2.7008-19-2026 HPE StoreEasy 1670 Expanded Storage - Prior to 2.7008-19-2026 CVSS...

5.3CVSS5.4AI score0.0011EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/09/03 4:24 p.m.•20 views

SUSE CVE-2026-80757

In the Linux kernel, the following vulnerability has been resolved: selinux: reject a class permission count below its inherited common securitygetpermissions maps an inherited common's permissions into an array sized by the class's own permissions.nprim, but classread takes that nprim verbatim...

5.8AI score0.00165EPSS
SaveExploits0References3
Rows per page
Query Builder